CSEAMAN
CSEAMAN (Cryptographic Security for Automotive Embedded Devices and Networks) is a two year research project funded by the Romanian National Authority for Scientific Research and Innovation (CNCS-UEFISCDI) for the establishment of young reasearch teams (project no. PN-II-RU-TE-2014-4-1501, contract no. 196/01/10/2015, 2015-2017)
Abstract: Current estimations set the number of vehicles at around 1 billion, moreover, vehicles changed from mere mechanical devices to complex electronic systems where dozens of embedded devices communicate over networks such as CAN, FlexRay or BroadR-Reach that lack security layers. Recent research showed how attacks with catastrophic consequences for drivers and passengers (e.g., disable brakes) can be mounted by simply inserting a miniature device that takes control over the car. In the era of cyber-terrorism, this is even more relevant as it may open new roads on cyber-physical system security. Without doubts, cryptographic security is the way to alleviate this problem and, as in the case of wireless or wired computer networks that today embed cryptography, before large scale adoption by the industry, intense academic research efforts are required. Our challenge here is to accommodate cryptographic security on devices with low computational and memory resources that communicate over networks with constrained bandwidth. Further, this security layer must be resilient at subtle interactions over the increasing number of wireless channels (WiFi, Bluetooth, NFC, etc.) that open cars to outsiders and bring an even more complex threat model. Existing security sub-systems in cars (e.g., electronic immobilizers, digital tachometers, etc.) are also within reach by our project as security is effective only if it addresses the automotive system unabridged leaving no entry points.
Expected results (24 months):
performance analysis for cryptographic functions on automotive grade controllers, more details here
design and analysis of security for various in-vehicle networks and subsystems, e.g., CAN, J1939, BCM modules, RF Keys, etc.
an experimental model with various in-vehicle networks and subsystems (CAN bus, LIN, automotive grade controllers, infotaiment unit, etc.), more details here
submissions to relevant journals and conferences, see publications list here
